Web Gui Unreachable since MyServers Beta Installation


Recommended Posts

Hello everyonne,

 

ive got into some problems with my unraid Web-Gui.

Since i installed the beta of the MyServers plugin my webgui was sometimes working and sometimes not, so i decided to uninstall the Plugin again.

 

Since then the server is working fine and i can get into the gui when booting into Gui Mode, the server is also reachable via ssh, but if im trying to reach the gui with whatever device via ip, its changing the ip inside the search field to a "xxxxxsomethingxxxx.unraid.net" domain and i get "Site not reachable", even after i unstalled the plugin and rebootet the system multiple times.

 

(Array, Dockers and VMs are all working fine and are reachable)

 

Im relatively new to linux and unraid, so any suggestions on what to do now?

 

Can i somehow move the logs to the array so i can attach them?

Link to comment

It sounds like you enabled SSL access to the webgui. If you would like to disable that and revert to normal http, go to Settings -> Management Access and set "Use SSL/TLS" to "No".

 

(From your description it sounds like DNS Rebinding has been enabled on your network since you set this up. You should be able to access the webgui by going to https://[ip address] and ignoring any error messages.)

 

SSL access access is a core feature of Unraid, unrelated to My Servers, which is why it remained enabled after uninstalling the Unraid.net plugin.

 

SSL is only a requirement if you want to use the Remote Access feature of My Servers. The other features of My Servers can still be used regardless of whether you enable this feature.

Link to comment
  • 1 month later...
On 4/6/2021 at 5:42 AM, ljm42 said:

It sounds like you enabled SSL access to the webgui. If you would like to disable that and revert to normal http, go to Settings -> Management Access and set "Use SSL/TLS" to "No".

 

(From your description it sounds like DNS Rebinding has been enabled on your network since you set this up. You should be able to access the webgui by going to https://[ip address] and ignoring any error messages.)

Thanks for this tip. Mine was set to Auto, I set it to "No" and its now working with local address over http.

Question: How do I unbind? Previously if I tried the local address it would hang then update the address to https://hashnumber.unraid.net
I would like to understand more.

Thanks

Link to comment

To the best of my knowledge, there's no way to have the unraid webui work "properly" from both http: and/or https:. My pfSense box does, but I'm not smart enough to make unraid do it (yet). My recommendation to anyone would be to set SSL/TLS to "no" so that local access to the webui is guaranteed. If you're worried about "inside" access, have a good password. If you want "outside" access, VPN in. If I'm a security idiot, please, someone, call me on it -- I'm here to learn.

 

(I think https://skjdhfgj.unraid.net is a security risk beyond anything I've mentioned above, but... I do appreciate LimeTech trying to help "users" secure and make the most of their product.)

 

6

Link to comment
4 hours ago, brucejobs said:

Question: How do I unbind? Previously if I tried the local address it would hang then update the address to https://hashnumber.unraid.net
I would like to understand more.

 

Getting around DNS Rebinding can be difficult, it all depends on your networking setup. Some ideas here:

  https://wiki.unraid.net/My_Servers#A_note_regarding_DNS_Rebinding_Protection

 

4 hours ago, 6of6 said:

To the best of my knowledge, there's no way to have the unraid webui work "properly" from both http: and/or https

 

Right, once you enable Local SSL access then we assume you actually want to use SSL and set it up so that any access over http redirects you to https.

 

The downside is that if your Internet goes down or you otherwise can't resolve yourpersonalhash.unraid.net then you won't be able to use the proper url to access your server. A quick workaround is to use https://ipaddress:port  (that is https not http) and then ignore any warnings from your browser about the certificate not matching the url.

 

If you choose to enable our optional Remote Access solution then we currently require you to enable Local SSL access too. If you don't enable Remote Access then Local SSL access is optional.

  • Thanks 1
Link to comment

Not sure if I'm in the right thread; I just search best+vpn and sorted by date. I have been using PureVPN with binhex-delugevpn for some time without issue however a few months ago torrents became none existent- very slow. I'm not sure exactly when the problem started as I only noticed recently and then thought back.... I think I've done everything I'm supposed to do after the 'leak discovery' and can access SAB and Jackett running through it. I'm sure torrents were working fine afterwards. If I console in to either of the above 3 I get the correct (VPN) external address.

 

If I turn the VPN off in the Deluge my torrents download sometimes hundreds of times faster... that's the only variable. SAB has no speed issues at all. I've had a nightmare dealing with PUREVPN support (or lack thereof) and looking for something else unless someone can point me in the direction of an issue it may be on my end. So in summary;

 

Can anyone advise on something else (simple, I'm not an expert) that may be causing the problem on my end ?

If not what is the best (most compatible) VPN to go to ?

 

Thanks in advance for any help.

Edited by Philby1975
Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.